CWE-627 · 6 records

Dynamic Variable Evaluation

CVEs in this class

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-8953No exploit	Unsafe eval usage in composiohq/composiocomposio · composio · CWE-627 pre-auth RCE	Critical9.8	—	1.2%	Mar 20, 2025
30Monitor	CVE-2026-2451No exploit	Unsafe variable evaluation in email templatespretix · double opt in step · CWE-627	High7.5	—	0.2%	Feb 16, 2026
30Monitor	CVE-2026-2452No exploit	Unsafe variable evaluation in email templatespretix · newsletters · CWE-627	High7.5	—	0.2%	Feb 16, 2026
30Monitor	CVE-2026-2415No exploit	Unsafe variable evaluation in email templatespretix · pretix · CWE-627	High7.5	—	0.2%	Feb 16, 2026
22Monitor	CVE-2023-31032No exploit	NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access.nvidia · dgx a100 firmware · CWE-627 Denial of service	Medium5.5	—	0.1%	Jan 12, 2024
11Monitor	GHSA-cq96-9974-v8hmNo exploit	Dynamic Variable Evaluation in qiskit-ibm-runtimePyPI · qiskit-ibm-runtime · CWE-627	Low2.8	—	—	Mar 20, 2024

CVE-2024-8953
39Monitor
Unsafe eval usage in composiohq/composio
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
composio · composioMar 20, 2025
CVE-2026-2451
30Monitor
Unsafe variable evaluation in email templates
HighCVSS 7.5No exploitEPSS 0%
pretix · double opt in stepFeb 16, 2026
CVE-2026-2452
30Monitor
Unsafe variable evaluation in email templates
HighCVSS 7.5No exploitEPSS 0%
pretix · newslettersFeb 16, 2026
CVE-2026-2415
30Monitor
Unsafe variable evaluation in email templates
HighCVSS 7.5No exploitEPSS 0%
pretix · pretixFeb 16, 2026
CVE-2023-31032
22Monitor
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
nvidia · dgx a100 firmwareJan 12, 2024
GHSA-cq96-9974-v8hm
11Monitor
Dynamic Variable Evaluation in qiskit-ibm-runtime
LowCVSS 2.8No exploit
PyPI · qiskit-ibm-runtimeMar 20, 2024